[alexreinking]

Summary

• Enable weekly version updates for the root uv workspace.
• Group all routine dependency updates into one PR per update run, including major updates.
• Group security updates separately so they remain independent of the weekly version-update schedule.

Validation

• Parsed YAML and checked ecosystem, root directory, weekly schedule, and wildcard version/security groups.
• pre-commit run --files .github/dependabot.yml passed all applicable checks.
• git diff --check passed.

Dependabot will apply this configuration once it is merged into the default branch.